Privacy Policy

Last updated: January 2025

Your privacy matters to us. This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the Kenya Data Protection Act 2019.

1. Who We Are

Faru Outdoors ("we", "our", "us") is a Kenya-based outdoor adventure platform operating at faruoutdoors.vercel.app. We are the data controller responsible for the personal information you provide when using our services.

For privacy-related enquiries, contact us at privacy@faruoutdoors.co.ke.

2. Information We Collect

We collect the following categories of personal information:

Account Information: Your full name, email address, and profile photo when you create a Faru account.

Booking Information: Your phone number, participant count, selected trip dates, special requests, and payment confirmation details when you make a booking.

Health Disclosures: Any medical information you voluntarily provide at the time of booking to enable safe participation. This information is treated with the highest level of confidentiality.

Usage Data: Pages visited, features used, device type, browser, and IP address, collected automatically to improve our platform.

Communications: Messages sent via our contact forms, WhatsApp, or email.

3. How We Use Your Information

We use your personal data to:

— Process and manage your bookings and trip registrations — Send booking confirmations, trip reminders, and logistical updates — Ensure your safety during trips by sharing relevant information with your assigned guide — Respond to your enquiries and support requests — Improve our platform and personalise your experience — Send occasional marketing communications (only with your consent; unsubscribe any time) — Comply with our legal obligations under Kenyan law

4. Legal Basis for Processing

We process your personal data on the following legal bases under the Kenya Data Protection Act 2019:

Contract Performance: Processing necessary to fulfil your booking or provide our services. Legitimate Interests: Improving our platform, preventing fraud, and ensuring safety. Consent: For marketing communications. You may withdraw consent at any time. Legal Obligation: Where required by Kenyan law or regulatory bodies.

5. Sharing Your Information

We do not sell your personal data. We may share your information with:

Trip Guides: Your name, phone number, and any health disclosures relevant to your trip, shared only with the assigned guide for safety purposes.

Payment Processors: Secure third-party payment providers (e.g., Safaricom M-Pesa, Flutterwave) to process transactions. They operate under their own privacy policies.

Technology Partners: Supabase (database hosting) and Vercel (platform hosting), both operating under GDPR-compliant data processing agreements.

Legal Authorities: When required by Kenyan law, court order, or to protect the safety of our users.

6. Data Storage and Security

Your data is stored on secure servers hosted by Supabase, with facilities in Europe. We implement industry-standard security measures including encrypted connections (HTTPS), access controls, and regular security audits.

Health disclosures are stored separately from general account data and are accessible only to authorised safety personnel. We retain your booking data for 5 years for accounting and legal compliance purposes, after which it is securely deleted.

7. Your Rights

Under the Kenya Data Protection Act 2019, you have the following rights:

Access: Request a copy of the personal data we hold about you. Correction: Request that inaccurate data be corrected. Deletion: Request deletion of your data, subject to legal retention requirements. Restriction: Request that we limit how we use your data. Objection: Object to processing based on legitimate interests. Portability: Receive your data in a commonly used, machine-readable format.

To exercise any of these rights, email privacy@faruoutdoors.co.ke. We will respond within 21 days.

8. Cookies

Our platform uses essential cookies to maintain your session and enable core functionality. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect how the platform functions.

9. Children's Privacy

Our platform is not directed at children under the age of 18. We do not knowingly collect personal data from minors. Participants under 18 must be accompanied by a parent or guardian who accepts these terms on their behalf.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via a notice on our platform. The date at the top of this page reflects the most recent update.

11. Contact & Complaints

For any privacy concerns, contact us at privacy@faruoutdoors.co.ke or via WhatsApp at +254 706 660 759.

If you are unsatisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya (ODPC) at odpc.go.ke.